ChaofanXU @_0pr_

This seems interesting ~ Hangzhou Joined August 2017

Tweets

413
Followers

110
Following

225
Likes

894

Russel van Dulken @Twistzz

7 days ago

2 - 0 vs Aurora, unbelievable team performance! Semi finals tomorrow.

66 23 4K 164K 14

I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-glob…

143 885 3K 427K 1K

SEKTOR7 Institute @SEKTOR7net

2 months ago

Tainting logs coming from ETW providers? Absolutely! In many cases it can be done from an unelevated process in userland, depending on security descriptor set on ETW_GUID_ENTRY (taken from registry). Impact? Sending fake events on behalf of almost any ETW provider, including…

4 54 201 24K 127

Download Image

Dirk-jan @_dirkjan

2 months ago

The ADSyncCertDump tool is now part of the adconnectdump tools and can be used to extract SP credentials from Entra ID connect hosts. I will cover that during my BH/DC talks today and Friday! Tool is heavily based on Shwmae by @_EthicalChaos_

Dirk-jan @_dirkjan

4 months ago

8 64 262 42K 150

Download Image

2 100 269 19K 160

MalDev Academy @MalDevAcademy

2 months ago

Exciting updates coming soon! - New specialized training arriving by the end of the month. - The Malware Development course will be adding modules based around AD attacks. - The Offensive Phishing Ops course will be getting a specialized Living off Trusted Sites (LOTS)…

4 16 150 7K 23

SpecterOps @SpecterOps

2 months ago

Red teamers know the drill: endless file churning, hunting for passwords & tokens. 🔍 Meet DeepPass2, our new secret scanning tool that goes beyond structured tokens to catch those tricky free-form passwords too. Read Neeraj Gupta's blog post for more. ghst.ly/40HLNNA

3 46 154 11K 87

MalDev Academy @MalDevAcademy

2 months ago

Local & Remote SAM dumping will be covered in the upcoming Malware Development Course update. Stay tuned!

0 37 226 12K 60

Download Image

Dirk-jan @_dirkjan

2 months ago

It's been almost a year since my last blog... So, here is a new one: Extending AD CS attack surface to the cloud with Intune certificates. Also includes ESC1 over Intune (in some cases). dirkjanm.io/extending-ad-c… Oh, and a new tool for SCEP: github.com/dirkjanm/scepr…

9 195 526 29K 256

mr.d0x @mrd0x

2 months ago

I didn't want to drop a new *Fix naming variant on you guys, but there you go. All jokes aside, it was a great collab with @Octoberfest73. Awesome person and really helps you push the limits when researching and testing💪

2 25 95 10K 29

SEKTOR7 Institute @SEKTOR7net

2 months ago

Interesting bug in CimFS driver. More importantly, it still lives in the kernel, as "admin to kernel is not a security boundary"... A post by Chen Le Qi (@cplearns2h4ck). Great work! #redteam #maldev #malwaredevelopment starlabs.sg/blog/2025/03-c…

2 32 93 6K 61

Download Image

5pider @C5pider

3 months ago

Introducing Havoc Professional: A Lethal Presence We’re excited to share a first look at Havoc Professional, a next-generation, highly modular Command and Control framework, and Kaine-kit our fully Position Independent Code agent engineered for stealth! infinitycurve.org/blog/introduct…

59 186 742 62K 209

MalDev Academy @MalDevAcademy

3 months ago

Update 18 is now available: maldevacademy.com/syllabus - Introduction To LSASS Dumping - Fetching LSASS Handle And Bypassing PPL - LSASS Dump Via Duplication - LSASS Dump Via RtlReportSilentProcessExit - LSASS Dump Via Seclogon Race Condition

3 39 218 13K 75

mr.d0x @mrd0x

3 months ago

A follow up on last week’s FileFix blog. FileFix (Part 2) mrd0x.com/filefix-part-2/

6 63 225 19K 89

MalDev Academy @MalDevAcademy

5 months ago

Utilizing our previously discovered registry key to hook LSASS's SamIGetUserLogonInformation2 API and capturing plaintext login credentials. github.com/Maldev-Academy…

4 39 178 816K 51

Download Image

MalDev Academy @MalDevAcademy

5 months ago

Loading a DLL into lsass.exe by editing a registry key value: github.com/Maldev-Academy…

5 85 508 28K 287

Download Image

MalDev Academy @MalDevAcademy

5 months ago

We will be giving away 5 free vouchers for @HackSpaceCon 2025. Special thanks to @k3nundrum for providing the vouchers. If you are interested, comment below and we'll select five winners this week.

165 41 233 27K 26

MalDev Academy @MalDevAcademy

6 months ago

The Offensive Phishing Operations Course has been released. 81 modules are included in the initial launch, with the first update already being worked on. More information: maldevacademy.com/phishing-course Syllabus: maldevacademy.com/phishing-cours…